Techniques for identifying media network flows that use dynamic codec identifications are described. In an embodiment, network flow information for a network flow between a first endpoint and a second endpoint is received from a network device interposed between the first endpoint and the second endpoint, wherein the network flow information includes at least an address for the first endpoint and a particular payload identification number. A request is sent to the first endpoint for one or more characteristics belonging to the first endpoint. In response to receiving the one or more characteristics, a profile database is searched for an entry that maps the one or more characteristics to a profile, wherein the profile maps one or more payload identification numbers to one or more encoding types. An encoding type for content transferred over the network flow is determined based on the profile and the particular payload identification number.
Legal claims defining the scope of protection, as filed with the USPTO.
1. A method comprising: a network monitor computer receiving network flow information, for a network flow of digital media packets between a first endpoint and a second endpoint, from a network device interposed between the first endpoint and the second endpoint, wherein the network flow information includes at least an address for the first endpoint and a particular payload identification value; the network monitor computer sending a request to the first endpoint to obtain one or more characteristics of the first endpoint; in response to receiving the one or more characteristics, the network monitor computer searching a profile database for an entry that maps the one or more characteristics to a profile, wherein the profile maps one or more payload identification values to one or more content encoding types; wherein the profile database contains a plurality of entries that each map a set of characteristics to a respective profile, the respective profile mapping a set of payload identification values to a set of content encoding types; the network monitor computer determining an encoding type for content transferred over the network flow based on the profile and the particular payload identification value; the network monitor computer presenting information to a user computer based on the encoding type; wherein the method is performed by one or more computing devices.
2. The method of claim 1 , wherein the content is audio content, video content, or multimedia content.
3. The method of claim 1 , wherein the network flow uses Real-time Transfer Protocol.
4. The method of claim 1 , wherein the one or more characteristics identify one or more of software running on the first endpoint or a device type of the first endpoint.
5. The method of claim 1 , wherein the request is a Simple Network Management Protocol request.
6. The method of claim 1 , wherein the network flow uses a protocol adhering to a standard that does not provide a static mapping between the particular payload identification value and the encoding type.
7. The method of claim 1 , wherein the particular payload identification value is within a dynamic range of payload values defined in a content communication protocol associated with the network flow, and wherein the first endpoint and second endpoint have negotiated an agreement upon the profile before the receiving, sending, searching and determining.
8. The method of claim 1 , wherein the network flow is a Real Time Protocol (RTP) flow and the particular payload identification value is within a dynamic range of RTP payload values, and wherein the first endpoint and second endpoint have negotiated a profile that associates the particular payload identification value with a particular codec before the receiving, sending, searching and determining.
9. A non-transitory computer readable medium storing one or more instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of: a network monitor computer receiving network flow information, for a network flow of digital media packets between a first endpoint and a second endpoint, from a network device interposed between the first endpoint and the second endpoint, wherein the network flow information includes at least an address for the first endpoint and a particular payload identification value; the network monitor computer sending a request to the first endpoint to obtain one or more characteristics of the first endpoint; in response to receiving the one or more characteristics, the network monitor computer searching a profile database for an entry that maps the one or more characteristics to a profile, wherein the profile maps one or more payload identification values to one or more content encoding types; wherein the profile database contains a plurality of entries that each map a set of characteristics to a respective profile, the respective profile mapping a set of payload identification values to a set of content encoding types; the network monitor computer determining an encoding type for content transferred over the network flow based on the profile and the particular payload identification value; the network monitor computer presenting information to a user computer based on the encoding type.
10. The non-transitory computer readable medium of claim 9 , wherein the content is audio content, video content, or multimedia content.
11. The non-transitory computer readable medium of claim 9 , wherein the network flow uses Real-time Transfer Protocol.
12. The non-transitory computer readable medium of claim 9 , wherein the one or more characteristics identify one or more of software running on the first endpoint or a device type of the first endpoint.
13. The non-transitory computer readable medium of claim 9 , wherein the request is a Simple Network Management Protocol request.
14. The non-transitory computer readable medium of claim 9 , wherein the network flow uses a protocol adhering to a standard that does not provide a static mapping between the particular payload identification value and the encoding type.
15. The non-transitory computer readable medium of claim 9 , wherein the particular payload identification value is within a dynamic range of payload values defined in a content communication protocol associated with the network flow, and wherein the first endpoint and second endpoint have negotiated an agreement upon the profile before the receiving, sending, searching and determining.
16. The non-transitory computer readable medium of claim 9 , wherein the network flow is a Real Time Protocol (RTP) flow and the particular payload identification value is within a dynamic range of RTP payload values, and wherein the first endpoint and second endpoint have negotiated a profile that associates the particular payload identification value with a particular codec before the receiving, sending, searching and determining.
17. An apparatus comprising: one or more processors of a network monitor computer; logic coupled to the one or more processors and configured to: receive network flow information, for a network flow of digital media packets between a first endpoint and a second endpoint, from a network device interposed between the first endpoint and the second endpoint, wherein the network flow information includes at least an address for the first endpoint and a particular payload identification value; send a request to the first endpoint to obtain one or more characteristics of the first endpoint; in response to receiving the one or more characteristics, searching a profile database for an entry that maps the one or more characteristics to a profile, wherein the profile maps one or more payload identification values to one or more content encoding types; wherein the profile database contains a plurality of entries that each map a set of characteristics to a respective profile, the respective profile mapping a set of payload identification values to a set of content encoding types; determine an encoding type for content transferred over the network flow based on the profile and the particular payload identification value; present information to a user computer based on the encoding type.
18. The apparatus of claim 17 , wherein the content is audio content, video content, or multimedia content.
19. The apparatus of claim 17 , wherein the network flow uses Real-time Transfer Protocol.
20. The apparatus of claim 17 , wherein the one or more characteristics identify one or more of software running on the first endpoint or a device type of the first endpoint.
21. The apparatus of claim 17 , wherein the request is a Simple Network Management Protocol request.
22. The apparatus of claim 17 , wherein the network flow uses a protocol adhering to a standard that does not provide a static mapping between the particular payload identification value and the encoding type.
23. The apparatus of claim 17 , wherein the particular payload identification value is within a dynamic range of payload values defined in a content communication protocol associated with the network flow, and wherein the first endpoint and second endpoint have negotiated an agreement upon the profile before the receiving, sending, searching and determining.
24. The apparatus of claim 17 , wherein the network flow is a Real Time Protocol (RTP) flow and the particular payload identification value is within a dynamic range of RTP payload values, and wherein the first endpoint and second endpoint have negotiated a profile that associates the particular payload identification value with a particular codec before the receiving, sending, searching and determining.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
October 10, 2012
February 16, 2016
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.